FIN6 returns to attack retailer point of sale systems in US, Europe

CHARLIE OSBORNE | September 5, 2018

article image
A new malware campaign has been detected which is targeting point-of-sale (PoS) systems across the United States and Europe. On Wednesday, researchers from IBM X-Force IRIS said the attacks have been attributed to the FIN6 cybercriminal group. This is only the second time that a campaign has been documented which appears to be the handiwork of FIN6. According to FireEye (.PDF), the group first emerged in 2016 when it came to light that the threat actors had stolen millions of credit card numbers. FIN6 made use of credential stealing backdoor malware called Grabnew to harvest account details, before using publicly-available tools to map compromised networks. The group would then find and exploit PoS devices using the Trinity malware, also known as FrameworkPOS, which is able to infiltrate PoS memory components and exfiltrate data.

Spotlight

Coupang

Powered by innovative technology and operations, we have set out to transform the customer experience journey – from revolutionizing last mile delivery to rethinking how customers search and discover on a truly mobile platform. We have been named one of the ‘50 Smartest Companies in the World’ by MIT Technology Review and we are one of Forbes magazine’s ‘30 Global Game Changers’. Only nine companies including Amazon, Google, Facebook, Tesla Motors and Coupang have been named on both lists.

OTHER ARTICLES

Retail supply chains will be held liable for price gouging

Article | March 22, 2020

Texas Attorney General Ken Paxton today issued a stern warning to retail suppliers, including those who supply grocery stores and pharmacies, that state law strictly prohibits price gouging in the wake of a declared disaster. Price gouging laws apply to any person or entity selling necessities at an exorbitant or excessive price after a disaster has been declared by the Governor or President. This prohibition includes those who supply retailers. Under the Texas Deceptive Trade Practices Act, any price-gougers may be required to reimburse consumers and may be held liable for civil penalties of up to $10,000 per violation with an additional penalty of up to $250,000 if the affected consumers are elderly.

Read More

The Retail Industry and the Persistent Digital Threat Landscape

Article | March 22, 2020

In today’s age of digital transformation, retailers have changed the ways in which they interact and engage with consumers — starting with online shopping and e-commerce experience. In order for retail organizations to remain competitive, an omnichannel experience is critical, and with that, retail organizations are relying heavily on websites, mobile apps, online marketplaces, and social media to promote products, sell goods and even provide customer service. As competition to acquire and retain customers continues to increase, many retailers are also expanding their efforts to include social media and digital advertising platforms to enter new markets, generate awareness, and connect with potential customers. However, retailers aren’t the only ones that are targeting the opportunities online and digital platforms offer. Cybercriminals also recognize the opportunities that online platforms represent for retailers, and are seeking to exploit their market share and revenue potential.

Read More

Yotpo Extends Its eCommerce Marketing Platform with Retail Syndication

Article | March 22, 2020

Today, Yotpo announced a partnership with Bazaarvoice that will enable Yotpo customers to syndicate their product reviews and visual user-generated content to the world’s largest network of retail websites, empowering over a billion monthly shoppers to make more confident buying decisions. The power of Yotpo’s data-driven eCommerce marketing platform combined with the broad reach of the Bazaarvoice Network demonstrates the value of Yotpo’s best-in-class solution for the world’s most cutting-edge brands. With this agreement, eCommerce marketers can continue to leverage Yotpo’s end-to-end platform to grow their direct-to-consumer (D2C) channel while accelerating third-party sales in parallel by syndicating their customer reviews, ratings, and visual content to the network’s 1,900 global retail sites.

Read More
POS SOLUTIONS

We Have No Idea What We’re Doing

Article | March 22, 2020

Prior to the pandemic and quarantine, less than 8% of commerce was online. As of Q3FY20 eCommerce grew north of 14% of all commerce. So while the Retailpocalypse was in its last phase, physical retail still outsold eCommerce by at least 7:1. The failure rate of crowdfunding campaigns is 85%. The failure rate of eCommerce store owners ranges from 80 to 97%. What if there were a way to bridge the gap between these three failure rates? What if we could bridge what people consume online with what they purchase offline before waiting for brain-computer interfaces (BCI)? In short what if we could bridge social and commerce? (Example use case.) Mostly missing are the memorable, meaningful, measurable and monetizable responses from people interested in stories about beagles, princesses and pitbulls, pets, car repair, raspberry blueberry vinaigrette gyros, budget-saving techniques for holiday travel, getting stuck at airports in blizzards, rental cars and Cup o’ Noodles, My Fair Lady and @Instacart, dining out at the delicious Banana Leaves café, cooking kosher halal gelatin-free, blue #1 artificial dye-free egg nog flavored marshmallows, 50th anniversaries and chocolate ganache, adventures camping with youth groups, birdhouses built by kids, rainbow hair dye, artificial dye-free cakes DIY for your child’s birthday party, and Halloween gingerbread houses and Greek Mount Olympus costumes. Other than ad revenue Youtube collects which most of it’s video posters see little of, monetizing the DIY craze has proven quite tricky. Ditto for Christmas shopping, smartphone accessories, buying a new luxury Subaru online with no salesman, how to get hard to find contact lenses and vitamins for kids, how Amazon often has thrift store prices on inventory thrift stores rarely carry, the challenges of buying clothes on Amazon that don’t fit but you don’t realize that until the clothes arrive, DIY car repair, funny car repair, glorious victory of car repair, diaper cakes and muscle aches, drones and honey scones, Triple A baseball and blue-tailed skinks, favorite foods, fasting, and Boston, fused vertebrae and buried treasure, where to buy school supplies when most stores are sold out, creameries and charcuterie, Bridging social media with eCommerce has been the white rhino of many investors and start-ups for many years. Instead of working toward such solutions, we have VC’s and stockholders asking about vanity metrics: - How many people looked at your website? Instead of: How many people subscribed or how many purchased an item?- - How many downloads per month does your app have? Instead of: How many of the people who downloaded your app have note removed it less than 30 days later? - What’s your ad revenue? Instead of: How can your product capture or create more value? In reply entrepreneurs answer these questions, they often present their increased spend on marketing followed up with vanity milestones: “We’re using Google Analytics and similar providers to track every movement of the supply chain, to ensure when the purchaser’s journey is completed, there’s no delay in delivery. This will lead to more frequent purchases ideally of higher priced products, and… We are pitching to Chipotle on Friday!” This leads to concentrated research on Chipotle’s SWAT, followed up with an excellent pitch including a demo via Zoom. The result of this pitch is usually: 1. The person loved the pitch and accepts your invitation to meet again with his/her manager next week. 2. The person you pitched to is not the decision-maker 3. The person you pitched to doesn’t quite understand what you’re pitching 4. The person you pitched to had 3 other projects due by COB and wasn’t fully present and listening to your 10-minute pitch 5. You provided too many facts too quickly, trying to build rapport 6. You shared how you’re product can reduce shrink, increase ROI, decrease costs, increase retention, and cure cancer. The person you pitched to doesn’t believe all those promises. 7. The person you pitched to is afraid of advocating change; the risk from change that results in lesser results can lead to negative repercussions. The risk of “business as usual” is minimal. Forgotten by almost all eCommerce platforms and store owners are the facts that: - People behave differently when they are observed (best behavior vs. average behavior). Despite this, we are seeing an incredible number of start-ups that offer to help track everything your customers do. “We’re Palantir for eCommerce” is essentially the ethos of these companies. - The Paradox of Choice by Barry Schwarz – too many choices overwhelm the person making the choice, to the point that no decision is made. If you don’t train your mind to buy what you want even if you have to look on pages other than Amazon and Google Shopping, you might end up buying the product you almost wanted. - The concept of incentivized virality – when PayPal gave $20 to each person who referred another person who joined, and when DropBox offered free data storage to people who referred friends who joined – which Reid Hoffman and Chris Yeh brilliantly detailed in Blitzscaling: The Lightning-Fast Path to Building Massively Valuable Companies. So now each eCommerce platform tries to copy Amazon who built their model on the opposite of physical retail. Consider your last experience renting a car at an airport vs. Amazon: - Do you want to refill the gas tank or would you like us to? - Would you like liability only or more comprehensive types of insurance coverage? - Would you like a GPS? - Would you like to join our exclusive members club? etc., etc. Adding to what @ElevateDemand said, “ B2B marketing is broken,” Raj De Datta, CEO and cofounder of @Bloomreach said, “The future of B2C marketing looks like B2B marketing,” Kevin Marasco, CMO of @Zenefits correctly said “marketing is going back in time from B2B to B2C” or person to person. Smart speakers in every phone, tablet, laptop PC, TV, and car succeeded by BCI, which @Facebook and @Neuralink are pioneering, hold great potential. Until those products arrive or after their R&D phase, @Homemaide’s object recognition and image recognition models can provide the sorely needed bridge between Social and Commerce.

Read More

Spotlight

Coupang

Powered by innovative technology and operations, we have set out to transform the customer experience journey – from revolutionizing last mile delivery to rethinking how customers search and discover on a truly mobile platform. We have been named one of the ‘50 Smartest Companies in the World’ by MIT Technology Review and we are one of Forbes magazine’s ‘30 Global Game Changers’. Only nine companies including Amazon, Google, Facebook, Tesla Motors and Coupang have been named on both lists.

Events